Configuring The Certificate Manager Using Cli; Generating A Self-Signed Certificate; Generating A Certificate Request And Importing The Server Certificate - Motorola WS5100 Series Migration Giude

8-2 WS5100 Series Switch Migration Guide

8.2 Configuring the Certificate Manager using CLI

Certificate Management configuration involves the following
• Configuration of Trustpoint.
• Configuration of RSA Key pairs.
• Generation of Self signed Certificate.
• Generation of Certificate Request.
• Uploading of Server Certificate Corresponding to the request and
• Uploading of CA Certificate.
A Trustpoint is either associated with (Server Certificate & Key pair) or (CA Certificate) or both.

8.2.1 Generating a Self-Signed Certificate

1. Configure Trustpoint named symbol
WS5100(config)# crypto pki trustpoint symbol
WS5100(config-trustpoint)#subject-name symbol in karnatka bangalore symbol
wid
WS5100(config-trustpoint)#email sym@symbol.com
WS5100(config-trustpoint)#ip-address 111.222.102.x
WS5100(config-trustpoint)#fqdn www.symbol.com
WS5100(config-trustpoint)#exit
WS5100(config)#
2. Generate a Selfsigned Certificate
WS5100(config)#crypto pki enroll symbol selfsigned
3. Show the contents of Trustpoints
WS5100(config)#show crypto pki trustpoints
Trustpoint :symbol
Server Certificate
Subject:
Issuer:
Valid From:
Valid Until:

8.2.2 Generating a Certificate Request and Importing the Server Certificate

1. Configure a trustpoint named External and generate a certificate request for it.
WS5100(config)# crypto pki trustpoint external
WS5100(config-trustpoint)#subject-name ws5100 us kkk sj symbol wid
WS5100(config-trustpoint)#ip-address 111.222.111.x
WS5100(config-trustpoint)#fqdn www.symbol.com
WS5100(config-trustpoint)#email sym@symbol.com
WS5100(config-trustpoint)#exit
WS5100(config)#
/C=in/ST=karntaka/L=bangalore/O=symbol/OU=wid/CN=symbol
/C=in/ST=karntaka/L=bangalore/O=symbol/OU=wid/CN=symbol
Jan 6 13:53:36 2007 GMT
Jan 6 13:53:36 2008 GMT